How to REMOVE sol.exe permanently ??? 3

[pctekk]

OK now its getting anoying,

I did a Shift + DEL in windows 2000 on the users machine
for
sol.exe (the solitaire game)
and it was recreated automatically.

HOw can you remove it permanently ??

Thanks

 

[Davetoo]

Add/Remove Programs - Add/Remove Windows Components - Accessories and Utilities - Games

 

[protos]

It was not there, and when you do a Start/Programs/Games
or Accessories it is NOT installed.

Why does sol.exe Recreate itself after being deleted ??

 

[Jasen]

Because win2k has a nifty "auto-repair" feature. Many files that are deleted or altered within the \winnt\ folder are replaced in seconds.
If you're trying to stop people from using it, change it's permissions so that no one can execute it. ________
Remember, you're unique... just like everyone else.

 

[Davetoo]

Arg! I forgot about the auto-repair...annoying as heck sometimes.

 

[pctekk]

ok........so how do you get around this

auto-repair to remove a file remotely from a user's pc ??

thanks gang

you said change the files' permissions ??

 

[wolluf]

pctekk,

open the file sysoc.inf (in \winnt\inf), and find lines looks like this:-

Games=ocgen.dll,OcEntry,games.inf,hide,7
AccessUtil=ocgen.dll,OcEntry,accessor.inf,hide,7

Edit out the 'hide' (or 'HIDE') - so this:-

Games=ocgen.dll,OcEntry,games.inf,,7
AccessUtil=ocgen.dll,OcEntry,accessor.inf,,7

Now go to add/remove programs, add/remove windows components.

You'll see Acessories and Utilities - select it and click on details. Now get the same for Games. Click on it and select details - one of games is Solitaire - which you can now uninstall (along with anythin else in Acessories and Utilities you don't want).

 

[pctekk]

i'll try that because
i'm doing this remotely on a user's pc

and there is no Security tab to change permissions on the file, i can only change the attributes

to Read Only, Hidden or Archive

There is only a General/Version/Compatibility tab.

 

[pctekk]

Wow it worked locally on a win2k pro box,

now my question is

after changing the sysoc.inf file remotely

is there a way to remove or go into Add/Remove windows components remotely and take out games
without
me having to go to the users machines or other machines ??

Thanks so much !!

btw...where can i get more info on these type o "hidden"
files that have this type of power ?

 

[wolluf]

I think you'd need remote control software (like vnc) installed to be able to go to add/remove remotely.

As to info about hidden files - I haven't got a 'source' - I've picked up tips from various places/experience (lots on these forums), and am not organised enough to keep a proper database of where they are!

 

[pctekk]

wolluf,

i tried the sysocmgr tool
but dont have the answer file correct, do you have a sample ??

http://support.microsoft.com/?kbid=222444

thanks

 

[wolluf]

pctekk,

sysocmgr /i:%windir%\inf\sysoc.inf /u:c:\ocm.txt (as per that M$ page) works for me (just one thing - no space in command between /i: and %windir (which there is in their example).

Are you thinking of running this remotely on other machines? (if you haven't a tool to do this, psexec - part of pstools at

http://www.sysinternals.com

might do the trick for you).

 

[protos]

yes remotely so the user isnt aware.
i tried it but not sure how long it takes to run, i dont get a response or log to see its done.
anyway, i appreciate it.

thanks buddy